2571 matches found
Comments plugin stored Cross-site Scripting (XSS) via an asset volume name
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name...
GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...
Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...
Millions of Attacks Target Tatsu Builder Plugin
The Wordfence Threat Intelligence team has been tracking a large-scale attack against a Remote Code Execution vulnerability in Tatsu Builder, which is tracked by CVE-2021-25094 and was publicly disclosed on March 24, 2022 by an independent security researcher. The issue is present in vulnerable...
GHSA-FFMH-R67W-M88F OpenStack Nova Denial of service attack on the compute host
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. The same code error...
OpenStack Nova Denial of service attack on the compute host
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. The same code error...
GHSA-MM7G-F2GG-CW8G Kubernetes arbitrary file overwrite
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running...
May 10, 2022—KB5014018 (Security-only update)
None None...
PT-2024-11868 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A bounds check issue in the Linux kernel's ASoC: ops has been resolved. The issue involves the semantics of the max field for sx controls, where max represents the number of steps rath...
CVE-2022-29150
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29151
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29150
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29151
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29151
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29150
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29138
Windows Clustered Shared Volume Elevation of Privilege Vulnerability...
CVE-2022-29135
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...
CVE-2022-29135
Windows Cluster Shared Volume CSV Elevation of Privilege Vulnerability...